Weekly Cybersecurity Roundup: March 24 - March 30, 2025

TL;DR

This week’s cybersecurity roundup includes critical browser vulnerabilities, the impact of identity theft, and various phishing attacks. Key highlights include the risks of moving from WhatsApp to Signal, a phishing attack on security expert Troy Hunt, and malware threats through fake CAPTCHAs and Google ads.

Weekly Cybersecurity Roundup: March 24 - March 30, 2025

Malwarebytes Labs Highlights

Last week on Malwarebytes Labs, several significant cybersecurity issues were addressed:

• Browser Vulnerabilities: A critical vulnerability in most browsers was exploited in targeted attacks, highlighting the importance of keeping browsers up-to-date¹.
• Identity Theft Impact: A man’s life was destroyed after his ID was stolen, leading to a criminal record and severe personal consequences².
• WhatsApp to Signal: The pros and cons of moving from WhatsApp to Signal were discussed, emphasizing the importance of secure communication tools³.
• Phishing Attack on Troy Hunt: Security expert Troy Hunt was hit by a phishing attack, underscoring that even professionals can be targeted⁴.
• Booking.com Phishing: A phishing scam using fake CAPTCHAs tricked hotel staff into downloading malware, demonstrating the evolving tactics of cybercriminals⁵.
• DeepSeek Malware: DeepSeek users were targeted with fake sponsored Google ads that delivered malware, highlighting the risks of online advertising⁶.
• 23andMe Data Breach: Following 23andMe’s bankruptcy, users were advised on how to delete their data and stay safe from the 2023 breach⁷.
• Google Maps Data Deletion: Google accidentally deleted some users’ Maps Timeline data, raising concerns about data reliability⁸.

ThreatDown Highlights

Last week on ThreatDown:

• Software as Malware: An article discussed why modern software can be considered the new malware, emphasizing the importance of secure software development⁹.

Stay Safe Online

To protect your business from ransomware and other cyber threats, consider our comprehensive business solutions. Our services ensure the removal of all remnants of ransomware and prevent reinfection. Want to learn more about how we can help protect your business? Get a free trial below.

TRY NOW

For more details, visit the full article: source

References

1. (2025). “Vulnerability in most browsers abused in targeted attacks”. Malwarebytes Labs. Retrieved 2025-03-31. ↩︎

2. (2025). ““This fraud destroyed my life.” Man ends up with criminal record after ID was stolen”. Malwarebytes Labs. Retrieved 2025-03-31. ↩︎

3. (2025). “Moving from WhatsApp to Signal: A good idea?”. Malwarebytes Labs. Retrieved 2025-03-31. ↩︎

4. (2025). “Security expert Troy Hunt hit by phishing attack”. Malwarebytes Labs. Retrieved 2025-03-31. ↩︎

5. (2025). “Booking.com phish uses fake CAPTCHAs to trick hotel staff into downloading malware”. Malwarebytes Labs. Retrieved 2025-03-31. ↩︎

6. (2025). “DeepSeek users targeted with fake sponsored Google ads that deliver malware”. Malwarebytes Labs. Retrieved 2025-03-31. ↩︎

7. (2025). “23andMe bankruptcy: How to delete your data and stay safe from the 2023 breach”. Malwarebytes Labs. Retrieved 2025-03-31. ↩︎

8. (2025). “Oops! Google accidentally deletes some users’ Maps Timeline data”. Malwarebytes Labs. Retrieved 2025-03-31. ↩︎

9. (2025). “Why YOUR software is the new malware”. ThreatDown. Retrieved 2025-03-31. ↩︎